Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
File:                     _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json)
Hash identifier:          z1sX7FmKdu782OrBD7HbyXECEgL0P9OOHnwPx9c+C7w=
Subject key identifier:   01:65:3F:28:A8:16:BD:39:31:A6:25:93:FF:97:57:0E:65:98:D8:AA
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Certificate issuer:       /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial:       0627
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
Manifest number:          060E
Signing time:             Wed 20 May 2026 22:58:37 +0000
Manifest this update:     Wed 20 May 2026 22:58:36 +0000
Manifest next update:     Wed 27 May 2026 22:58:36 +0000
Files and hashes:         1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: DbcPutQKEuKBYdpZu5dAba+vKrWce7OwTfb/NiI+Awg=)
                          2: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: LMoK6W32MRhH2sWdtFfKukoaxVo2lgpAN0mzc0aoUcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
                          rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
        Validity
            Not Before: May 20 22:58:36 2026 GMT
            Not After : May 27 22:58:36 2026 GMT
        Subject: CN=6a0e3c9d-d3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9e:80:2c:b7:a0:e4:1d:61:ae:70:9c:a0:7c:
                    0b:0c:21:8b:11:2b:9e:0a:f9:4b:d0:d4:26:c5:37:
                    4d:fc:1c:1b:65:81:34:f4:b5:c5:38:e6:22:bb:bc:
                    3b:a9:0d:39:4d:0e:04:be:21:78:ed:7a:93:d4:ba:
                    90:89:99:db:f9:ee:89:f1:f9:90:59:05:54:c5:7a:
                    21:35:48:48:ee:3a:bc:cb:d2:86:bd:60:ed:97:15:
                    91:ab:49:9d:21:8c:15:94:66:ca:80:ed:96:ee:29:
                    88:92:35:23:fb:fc:8a:60:9e:fe:1d:17:7d:f8:ba:
                    97:9c:07:20:ba:21:eb:8e:8e:4b:67:60:72:ed:91:
                    e1:b9:54:1b:76:8e:12:43:5c:97:40:49:6f:92:20:
                    8f:6e:b9:0d:54:8d:1c:53:65:e6:06:3e:86:78:5c:
                    cc:79:4f:9a:12:41:5b:a8:ca:f6:6b:46:11:d3:b6:
                    10:29:f6:47:e9:ee:71:60:de:26:75:b7:68:82:89:
                    87:dd:c5:61:93:18:90:59:3a:07:aa:1a:2c:0a:09:
                    05:ba:c0:0d:69:29:90:13:6c:49:21:c0:bb:93:f7:
                    01:5c:21:9e:e3:8d:b5:77:cd:8e:a2:28:54:54:db:
                    4a:cd:83:18:f5:3f:27:9f:71:d0:af:1e:38:fb:23:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:65:3F:28:A8:16:BD:39:31:A6:25:93:FF:97:57:0E:65:98:D8:AA
            X509v3 Authority Key Identifier:
                keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:39:d5:bf:df:59:c6:75:9e:3d:fd:98:52:5b:5c:93:6a:58:
         62:24:59:8f:e8:e7:b2:44:cb:47:d4:32:b0:1b:1c:16:b9:2a:
         05:1b:e6:c7:3b:96:9b:e8:f0:29:34:a0:a0:c3:29:98:79:39:
         ef:8d:bd:40:24:90:2e:38:57:95:d2:f4:3e:02:fd:51:15:0b:
         61:bd:0f:92:c7:85:41:81:b3:4e:9c:05:3e:2b:ea:8c:15:92:
         7b:e7:a8:ee:f4:b4:53:ef:26:84:32:f2:fd:84:f8:08:f9:01:
         63:70:6f:37:ce:47:11:da:5c:1d:c7:eb:6a:d4:23:90:00:47:
         20:e5:b0:fb:12:1a:de:2e:7f:9e:8c:a0:73:e0:ad:09:a4:ae:
         ff:db:4e:bb:41:c5:cf:0a:07:c5:8b:ba:7f:7f:d2:65:a3:46:
         da:fb:ce:e4:bd:36:f8:35:f1:73:d7:de:64:da:a5:dd:42:a1:
         ad:9d:ce:14:91:e4:5a:c8:31:c6:b7:79:a7:19:5c:e5:bd:5a:
         26:05:7a:9f:db:b7:95:90:31:ea:4a:fd:b0:e4:f3:ef:59:de:
         dc:49:23:cd:20:af:e4:e0:a0:b3:41:c6:84:d6:98:05:b7:e4:
         85:10:78:59:11:1c:68:2f:02:50:f7:05:e5:bb:c4:b7:25:5c:
         5c:15:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:10 2026 by rpki-client